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fy. . Abstract. This paper presents a simple local medium access control 

protocol, called Jade, for multi-hop wireless networks with a single chan- 
nel that is provably robust against adaptive adversarial jamming. The 

\^ • wireless network is modeled as a unit disk graph on a set of nodes dis- 

^"*^ ' tributed arbitrarily in the plane. In addition to these nodes, there are 

adversarial jammers that know the protocol and its entire history and 
that are allowed to jam the wireless channel at any node for an arbi- 
trary (1 — effraction of the time steps, where < e < 1 is an arbitrary 
constant. We assume that the nodes cannot distinguish between jammed 

C*) ' transmissions and collisions of regular messages. Nevertheless, we show 

*r , that Jade achieves an asymptotically optimal throughput if there is a 

jtJL • sufficiently dense distribution of nodes. 

1 Introduction 

o 

f~} The problem of coordinating the access to a shared medium is a central challenge 

in wireless networks. In order to solve this problem, a proper medium access 
control (MAC) protocol is needed. Ideally, such a protocol should not only be able 
to use the wireless medium as effectively as possible, but it should also be robust 
against attacks. Unfortunately, most of the MAC protocols today can be easily 
attacked. A particularly critical class of attacks are jamming attacks (i.e., denial- 
of-scrvice attacks on the broadcast medium). Jamming attacks arc typically easy 
to implement as the attacker does not need any special hardware. Attacks of 
this kind usually aim at the physical layer and are realized by means of a high 
transmission power signal that corrupts a communication link or an area, but 
they may also occur at the MAC layer, where an adversary may either corrupt 
control packets or reserve the channel for the maximum allowable number of 
slots so that other nodes experience low throughput by not being able to access 
the channel. In this paper we focus on jamming attacks at the physical layer, 
that is, the interference caused by the jammer will not allow the nodes to receive 
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messages. The fundamental question that we are investigating is: Is there a MAC 
protocol such that for any physical-layer jamming strategy, the protocol will still 
be able to achieve an asymptotically optimal throughput for the non-jammed time 
steps? Such a protocol would force the jammer to jam all the time in order to 
prevent any successful message transmissions. Finding such a MAC protocol 
is not a trivial problem. In fact, the widely used IEEE 802.11 MAC protocol 
already fails to deliver any messages for very simple oblivious jammers that 
jam only a small fraction of the time steps [3J. On the positive side, Awerbuch 
et al. [3J have demonstrated that there arc MAC protocols which arc provably 
robust against even massive adaptive jamming, but their results only hold for 
single-hop wireless networks with a single jammer, that is, all nodes experience 
the same jamming sequence. 

In this paper, we significantly extend the results in [2]. We present a MAC 
protocol called Jade (a short form of "jamming defense") that can achieve a 
constant fraction of the best possible throughput for a large class of jamming 
strategies in a large class of multi-hop networks where transmissions and inter- 
ference can be modeled using unit-disk graphs. These jamming strategies include 
jamming patterns that can be completely different from node to node. It turns 
out that while Jade differs only slightly from the MAC protocol of [2], the 
proof techniques needed for the multi-hop setting significantly differ from the 
techniques in [2j. 

1.1 Model 

We consider the problem of designing a robust MAC protocol for multi-hop 
wireless networks with a single wireless channel. The wireless network is modeled 
as a unit disk graph (UDG) G = (V, E) where V represents a set of n = \V\ honest 
and reliable nodes and two nodes u, v £ V are within each other's transmission 
range, i.e., {w, v} £ E, if and only if their (normalized) distance is at most 1. 
We assume that time proceeds in synchronous time steps called rounds. In each 
round, a node may either transmit a message or sense the channel, but it cannot 
do both. A node which is sensing the channel may either (i) sense an idle channel 
(if no other node in its transmission range is transmitting at that round and its 
channel is not jammed), (ii) sense a busy channel (if two or more nodes in its 
transmission range transmit at that round or its channel is jammed), or (iii) 
receive a packet (if exactly one node in its transmission range transmits at that 
round and its channel is not jammed). 

In addition to these nodes there is an adversary (who may control any number 
of jamming devices). We allow the adversary to know the protocol and its entire 
history and to use this knowledge in order to jam the wireless channel at will 
at any round (i.e, the adversary is adaptive). However, like in [2], the adversary 
has to make a jamming decision before it knows the actions of the nodes at the 
current round. The adversary can jam the nodes individually at will, as long 
as for every node u, at most a (1 — effraction of its rounds is jammed, where 
e > can be an arbitrarily small constant. That is, v has the chance to receive 
a message in at least an e-fraction of the rounds. More formally, an adversary is 



called (T, 1 — e) -bounded for some T € N and < e < 1, if for any time window 
of size w > T and at any node v, the adversary can jam at most (1 — e)w of the 
w rounds at v. 

Given a node v and a time interval /, we define f v (I) as the number of time 
steps in / that are non-jammed at v and s v (I) as the number of time steps in I in 
which v successfully receives a message. A MAC protocol is called c-competitive 
against some (T, 1 — e)-bounded adversary if, for any time interval / with |/| > 
K for a sufficiently large K (that may depend on T and n), ^2 veV s v (I) > 
c ■ YlveV /"CO" I n other words, a c-compctitivc MAC protocol can achieve at 
least a c-fraction of the best possible throughput. 

Our goal is to design a symmetric local-control MAC protocol (i.e., there is 
no central authority controlling the nodes, and all the nodes are executing the 
same protocol) that has a constant-competitive throughput against any (T, 1— e)- 
bounded adversary in any multi-hop network that can be modeled as a UDG. In 
order to obtain a more refined picture of the competitiveness of our protocol, we 
will also investigate so-called fc-uniform adversaries. An adversary is k-uniform 
if the node set V can be partitioned into k subsets so that the jamming sequence 
is the same within each subset. In other words, we require that at all times, the 
nodes in a subset arc cither all jammed or all non-jammed. Thus, a 1-uniform 
jammer jams either everybody or nobody in a round whereas an n- uniform 
jammer can jam the nodes individually at will. 

In this paper, we will say that a claim holds with high probability (w.h.p.) iff 
it holds with probability at least 1 — l/n c for any constant c > 1; it holds with 
moderate probability (w.m.p.) iff it holds with probability at least 1 — l/(logn) c 
for any constant c > 1. 

1.2 Related Work 

Due to the topic's importance, wireless network jamming has been extensively 
studied in the applied research fields |ll5l6l22l26l27l28l3QI31l37l38l3ai40j . both 
from the attacker's perspective 6 26 27 40 as well as from the defender's per- 
spective |l|5|6|27|28|30|38|40j — also in multi-hop settings (e.g. |21|32|42|43|4l] ). 

Traditionally, jamming defense mechanisms operate on the physical layer 
[28 30 36 . Mechanisms have been designed to avoid jamming as well as detect 
jamming. Spread spectrum technology has been shown to be very effective to 
avoid jamming as with widely spread signals, it becomes harder to detect the 
start of a packet quickly enough in order to jam it. Unfortunately, protocols 
such as IEEE 802.11b use relatively narrow spreading [50], and some other IEEE 
802.11 variants spread signals by even smaller factors [5]. Therefore, a jammer 
that simultaneously blocks a small number of frequencies renders spread spec- 
trum techniques useless in this case. As jamming strategies can come in many 
different flavors, detecting jamming activities by simple methods based on sig- 
nal strength, carrier sensing, or packet delivery ratios has turned out to be quite 
difficult [17]. 

Recent work has also studied MAC layer strategies against jamming, includ- 
ing coding strategies [6], channel surfing and spatial retreat [1|41| . or mecha- 



nisms to hide messages from a jammer, evade its search, and reduce the impact 
of corrupted messages [35]. Unfortunately, these methods do not help against 
an adaptive jammer with full information about the history of the protocol, like 
the one considered in our work. 

In the theory community, work on MAC protocols has mostly focused on 
efficiency. Many of these protocols are random backoff or tournament-based pro- 
tocols [4I7I17I18I25I34J that do not take jamming activity into account and, in 
fact, are not robust against it (see [2] for more details). The same also holds for 
many MAC protocols that have been designed in the context of broadcasting [5J 
and clustering |24j . Also some work on jamming is known (e.g., [5] for a short 
overview). There are two basic approaches in the literature. The first assumes 
randomly corrupted messages (e.g. [53]), which is much easier to handle than 
adaptive adversarial jamming [3J. The second line of work either bounds the 
number of messages that the adversary can transmit or disrupt with a limited 
energy budget (e.g. [16123] ) or bounds the number of channels the adversary can 
jam (e.g. |10lllll2ll3ll4[TM2^] ). 

The protocols in [16 23] can tackle adversarial jamming at both the MAC 
and network layers, where the adversary may not only be jamming the channel 
but also introducing malicious (fake) messages (possibly with address spoofing) . 
However, they depend on the fact that the adversarial jamming budget is finite, 
so it is not clear whether the protocols would work under heavy continuous 
jamming. (The result in [16) seems to imply that a jamming rate of 1/2 is the 
limit whereas the handshaking mechanisms in |23| seem to require an even lower 
jamming rate.) 

In the multi-channel version of the problem introduced in the theory com- 
munity by Dolev [13] and also studied in [10|ll|12|13|14|15|29j , a node can only 
access one channel at a time, which results in protocols with a fairly large run- 
time (which can be exponential for deterministic protocols |11|14] and at least 
quadratic in the number of jammed channels for randomized protocols [12 29 
if the adversary can jam almost all channels at a time). Recent work [10] also 
focuses on the wireless synchronization problem which requires devices to be 
activated at different times on a congested single-hop radio network to synchro- 
nize their round numbering while an adversary can disrupt a certain number of 
frequencies per round. Gilbert et al. |15j study robust information exchange in 
single-hop networks. 

Our work is motivated by the work in [3] and [2]. In [3] it is shown that an 
adaptive jammer can dramatically reduce the throughput of the standard MAC 
protocol used in IEEE 802.11 with only limited energy cost on the adversary 
side. Awerbuch et al. [2j initiated the study of throughput-competitive MAC 
protocols under continuously running, adaptive jammers, but they only consider 
single-hop wireless networks. We go one step further by considering multi-hop 
networks where different nodes can have different channel states at a time, e.g., 
a transmission may be received only by a fraction of the nodes. It turns out 
that while the MAC protocol of [2] can be adopted to the multi-hop setting 
with a small modification, the proof techniques cannot. We are not aware of any 



other theoretical work on MAC protocols for multi-hop networks with provable 
performance against adaptive jamming. 

1.3 Our Contributions 

In this paper, we present a robust MAC protocol called Jade. Jade is a fairly 
simple protocol: it is based on a very small set of assumptions and rules and has 
a minimal storage overhead. In fact, in Jade every node just stores a constant 
number of parameters, among them a fixed parameter 7 that should be chosen 
so that the following main theorem holds: 

Theorem 1. When running Jade for fl((T log n)/e+ (log n) 4 /(je) 2 ) time steps, 
Jade has a constant competitive throughput for any (T, 1 — e) -bounded adversary 
and any UDG w.h.p. as long as 7 = 0(1/ (log T+log log n)) and (a) the adversary 
is 1-uniform and the UDG is connected, or (b) there are at least 2/e nodes within 
the transmission range of every node. 

Note that in practice, log T and log log n are rather small so that our condition 
on 7 is not too restrictive. Also, a conservative estimate on logT and log log n 
would leave room for a supcrpolynomial change in n and a polynomial change 
in T over time. 

On the other hand, we can also show the following result demonstrating that 
Theorem [I] essentially captures all the scenarios (within our notation) under 
which Jade can have a constant competitive throughput. 

Theorem 2. If (a) the UDG is not connected, or (b) the adversary is allowed 
to be 2-uniform and there are nodes with o(l/e) nodes within their transmission 
range, then there are cases in which JADE is not constant competitive for any 
constant c independent of e. 

Certainly, no MAC protocol can guarantee a constant competitive through- 
put if the UDG is not connected. However, it is still open whether there are 
simple MAC protocols that are constant competitive under non-uniform jam- 
ming strategies even if there are o(l/e) nodes within the transmission range of 
a node. 



2 Description of Jade 

This section first gives a short motivation for our algorithmic approach and then 
presents the Jade protocol in detail. 



2.1 Intuition 

The intuition behind our MAC protocol is simple: in each round, each node u 
tries to send a message with probability p u with p u < p for some small con- 
stant < p < 1. Consider the unit disk D(u) around node u consisting of 



it's neighboring nodes as well as u^\ Moreover, let N(u) = D{u) \ {u} and 
p = J2v£N(u)P v - Suppose that u is sensing the channel. Let qo be the proba- 
bility that the channel is idle at u and let q\ be the probability that exactly 
one node in N(u) is sending a message. It holds that qo = YlveN(u)(^ ~ Pv) arj d 
<7i = J2veN(u)PvU w eN(u)\{v}( 1 ~Pw)- Hence, 

Qi < ^2 Vv Y~~ II ( 1_ ^) = 73^> qi - ^2 Pv II ( l -Pw)=qo-P- 

v£N(u) wEN(u) veN(u) weN(u) 

Thus we have the following lemma, which has also been derived in [2] for the 
single-hop case. 

Lemma 1. q ■ p < q x < ^K ■ p. 

By Lemma [TJ if a node v observes that the number of rounds in which the 
channel is idle is essentially equal to the number of rounds in which exactly one 
message is sent, then p = ^2 veN i v \Pv is likely to be around 1 (if p is a sufficiently 
small constant), which would be ideal. Otherwise, the nodes know that they need 
to adapt their probabilities. Thus, if we had sufficiently many cases in which an 
idle channel or exactly one message transmission is observed (which is the case if 
the adversary does not heavily jam the channel and p is not too large), then one 
can adapt the probabilities p v just based on these two events and ignore all cases 
in which the wireless channel is blocked, either because the adversary is jamming 
it or because at least two messages interfere with each other (see also [19] for 
a similar conclusion). Unfortunately, p can be very high for some reason, which 
requires a more sophisticated strategy for adjusting the access probabilities. 

2.2 Protocol Description 

In Jade, each node v maintains a probability value p v , a threshold T v and a 
counter c v . The parameters p,j > in the protocol are fixed and the same for 
every node, p may be set to any constant value so that < p < 1/24, and 7 
should be small enough so that the condition in Theorem Q] is met. 

Initially, every node v sets T v := 1, c v := 1 andp t , := p. Afterwards, the Jade 
protocol works in synchronized rounds. In every round, each node v decides with 
probability p v to send a message. If it decides not to send a message, it checks 
the following two conditions: 

— If v senses an idle channel, then p v := min{(l + r y)p v ,p\. 

— If v successfully receives a message, then p v :— (1 + r ))~ l p v and T v :— 
max{7; - 1,1}. 



1 In this paper, disks (and later sectors) will refer both to 2-dimensional areas in the 
plane as well as to the set of nodes in the respective areas. The exact meaning will 
become clear in the specific context. 



Afterwards, v sets c v := c v + 1. If c v > T v then it does the following: v sets 
c v := 1, and if there was no round among the past T v rounds in which v sensed a 
successful message transmission or an idle channel, then p v := (1 + r y)~ 1 p v and 
T v := min{T„ + 1, 2 1 /( 4 t) } . 



As we will see in the upcoming section, the concept of using a multiplicative- 
incrcasc-multiplicativc-decrease mechanism for p v and an additivc-increase- 
additive-decrease mechanism for T v , as well as the slight modifications of the 
protocol in [2], marked in italic above, are crucial for Jade to work. 



3 Analysis of Jade 

In contrast the description of Jade, its stochastic analysis is rather involved as it 
requires to shed light onto the complex interplay of the nodes all following their 
randomized protocol in a highly dependent manner. We first prove Theorem [1] 
( Sections 13. II and 13. 2\i and then prove Theorem [2l (Section I3.3|) . In order to show 
the theorems, we will frequently use the following variant of the Chernoff bounds 
035]. 

Lemma 2. Consider any set of binary random variables X\, . . . ,X n . Suppose 
that there are values p\, . . . ,p n G [0, 1] with EUIies A.;] < niesP* f or ever V se ^ 
S Q {1, . . . , n}. Then it holds for X = Yn=i ^i and fi = J2"=i Pi an d an V ^ > 
that 

( e 5 V gj. 

P[A>(l + ^i]<(^ (i + (5)1+A . j < e -WW. 

//, on the other hand, it holds that E[rj igS Xj] > flies^* f or ever V se t S C 
{1, . . . , n}, then it holds for any < 8 < 1 that 

e -s ^ f 



Throughout the section we assume that 7 = 0(l/(logT + log log n)) is suffi- 
ciently small. 



3.1 Proof of Theorem Q] 

Wc first look at a slightly weaker form of adversary. We say a round t is open for 
a node v if v and at least one other node in its neighborhood are non-jammed 
(which implies that v's neighborhood is non-empty). An adversary is weakly 
(T, 1 — e)-bounded for some T £ N and < e < 1 if the adversary is (T, 1 — e)- 
bounded and in addition to this, at least a constant fraction of the non-jammed 
rounds at each node are open in every time interval of size w > T. 



Theorem 3. When running Jade for 0([T + (log 3 n)/(^ 2 e)] ■ (logn)/e) rounds 
it holds w.h.p. that Jade is constant competitive for any weakly (T, \ — e)-bounded 
adversary. 

Proof. First, we focus on a time frame F consisting of (alogn)/e subframes 
of size / = a[T + (log 3 rt)/(7 2 e)] each, where / is a multiple of T and a is a 
sufficiently large constant. The proof needs the following three lemmas. The first 
one is identical to Claim 2.5 in [2|. It is true because only successful message 
transmissions reduce T u . 

Lemma 3. If in a time interval I the number of rounds in which a node u 
successfully receives a message is at most r, then u increases T u in at most 
r + y2|J| rounds in I . 

The second lemma holds for arbitrary (not just weakly) (T, 1 — e)-bounded 
adversaries and will be shown in Section [3J2] 



Lemma 4. For every node u, J2 V £D(u) Pv = O(l) for at least a (1 — eft)-fraction 
of the rounds in time frame F, w.h.p., where the constant ft > can be made 
arbitrarily small. 

The third lemma just follows from some simple geometric argument. 

Lemma 5. A disk of radius 2 can be cut into at most 20 regions so that the 
distance between any two points in a region is at most 1. 

Consider some fixed node u. Let J C F be the set of all non-jammed open 
rounds at u in time frame F (which are a constant fraction of the non-jammed 
rounds at u because we have a weakly (T, 1 — e)-bounded adversary). Let p be 
a constant satisfying Lemma |4] (i.e., J2wgd(v)Pw — p)- Define DD{u) to be the 
disk of radius 2 around u (i.e., it has twice the radius of D(u)). Cut DD(u) 
into 20 regions R\, . . . , R20 satisfying LemmaEJ and let v% be any node in region 
Ri (if such a node exists), where Vi — u if u £ Ri- According to Lemma U it 
holds for each i that at least a (1 — e/3'/20)-fraction of the rounds in F satisfy 
J2 w<£D i v .)Pw < P for any constant ft' > 0, w.h.p. Thus, at least a (1 — eft")- 
fraction of the rounds in F satisfy Y^weD(v) P w — P ^ or ever V i f° r an y constant 
ft" > 0, w.h.p. As D(v) C DD{u) for all v G D{u) and u has at least e|F| non- 
jammed rounds in F, we get the following lemma, which also holds for arbitrary 
(T, 1 — e) -bounded adversaries 

Lemma 6. At least a (1 — ft)-fraction of the rounds in J satisfy X)t>en(«) Pv ^ P 
and J2w£D(v)Pw = 0(p) f or a M n °des v € D(u) for any constant ft > 0, w.h.p. 

Let us call these rounds good. Since the probability that u senses the channel 
is at least 1 —p and the probability that the channel at u is idle for X^ie-DM P w — 
p is equal to l\ v eN(u)( l ~ Pv) > HveN(u) e_2p " ^ e ~ 2P ' u senses an idle channel 
for at least (1 — p)(l — ft)\ J\e~ 2p > 2ft\J\ many rounds in J on expectation if ft is 
sufficiently small. This also holds w.h.p. when using the Chernoff bounds under 



the condition that at least (1 — 0)\J\ rounds in F are good (which also holds 
w.h.p.). Let k be the number of times u receives a message in F. We distinguish 
between two cases. 

Case 1: k > (3\ J|/6. Then Jade is constant competitive for u and we are done. 

Case 2: k < /3|J|/6. Then we know from Lemma[3]that p u is decreased at most 
(3\ J|/6 + \/2\F\ times in F due to c u > T u . In addition to this, p u is decreased 
at most (3\J\/6 times in F due to a received message. On the other hand, p u 
is increased at least 2/3| J\ times in J (if possible) due to an idle channel w.h.p. 
Also, we know from the Jade protocol that at the beginning of F, p u = p. 
Hence, there must be at least /3(2 - 1/6 - 1/6) \J\ - ^J2\F\ > (3/2)/?| J\ rounds 
in J w.h.p. at which p u = p. As there are at least (1 — j3)\J\ good rounds in 
J (w.h.p.), there are at least /3\J\/2 good rounds in J w.h.p. in which p u = p. 
For these good rounds, u has a constant probability to transmit a message and 
every node v £ F)(u) has a constant probability of receiving it, so u successfully 
transmits (9(|J|) messages to at least one of its non-jammed neighbors in F (on 
expectation and also w.h.p.). 

If we charge 1/2 of each successfully transmitted message to the sender and 
1/2 to the receiver, then a constant competitive throughput can be identified for 
every node in both cases above, so Jade is constant competitive in F. 

It remains to show that Theorem [3] also holds for larger time intervals than 
|F|. First, note that all the proofs are valid as long as 7 < l/[c(logT + loglogn)] 
for a constant c > 2, so we can increase T and thereby also \F\ as long as this 
inequality holds. So w.l.o.g. we may assume that 7 = l/[2(logT + log log n)]. 
In this case, 2 1 /' 4 " 7 ' < ^/|F|, so our rule of increasing T v in Jade implies that 
T v < y/\F\ a t an Y time. This allows us to extend the competitive throughput 
result from a single to any sequence of polynomial in n many time frames F, 
which completes the proof of Theorem [3] □ 

Now, let us consider the two cases of Theorem [TJ Recall that we allow here 
any (T, 1 — e)-bounded adversary and not just a weakly bounded. 



Case 1: the adversary is 1-uniform and the UDG is connected. In this 
case, every node has a non-empty neighborhood and therefore all non-jammed 
rounds of the nodes are open. Hence, the conditions on a weakly (T, 1 — e)- 
bounded adversary are satisfied. So Theorem [3] applies, which completes the 
proof of Theorem Q] a). 

Case 2: |D(u)| > 2/e for all v 6 V. Consider some fixed time interval / 
with |/| being a multiple of T. For every node v £ D(u) let f v be the number 
of non-jammed rounds at v in / and o v be the number of open rounds at v in 
I. Let J be the set of rounds in I with at most one non-jammed node. Suppose 
that \J\ > (1 — e/2)\I\. Then every node in D{u) must have more than (e/2)|/| 
of its non-jammed rounds in J . As these non-jammed rounds must be serialized 



in J to satisfy our requirement on J, it holds that \J\ > ^2 veD i u \{e/2)\I\ > 
(2/e)-(e/2)|/| = |/|. Since this is impossible, it must hold that |J| < (l-e/2)|I|. 
Thus, J2 veD{u) o v > (E„ 6 D( U )A>) ~ l J l > (V 2 ) E„ e r>(„) /^ because 
E ue i3( u ).A' > ( 2 / e ) • e l 7 l = 2|J|. Let D'(u) be the set of nodes v E D(u) 
with o v > f v /4. That is, for each of these nodes, a constant fraction of the 
non-jammed time steps is open. Then J2 v eD(u)\D'(u) °" < (V 4 ) E„e£>(«) fv, so 

HveD'(u) °v > (V 2 ) Y,veD(u) °v > (V 4 ) Y,veD(u) fv 

Consider now a set U C V of nodes so that U«et/ -^( u ) = ^ anc ^ f° r ever y 
v € V there are at most 6 nodes u G U with v € D(u) (U is easy to construct 
in a greedy fashion for arbitrary UDGs and also known as a dominating set of 
constant density). Let V = U ue c/ £>'(")■ Since E„e-D'(«) ^ - ^/ 4 ) S v6 £>(«) /" 
for every node u e 17, it follows that E«ev °« - l 1 / 6 ) E«g(7 Et,eD'(«) °i' ^ 
(V^EueJ/EveuwA- ^ (V24) E„ e v fv Using that together with Theo- 
rem [3] which implies that Jade is constant competitive w.r.t. the nodes in V', 
completes the proof of Theorem Q] b) . 

3.2 Proof of Lemma H 

In order to finish the proof of Thcorcm[lJ it remains to prove LemmaHJ Consider 
any fixed node u. We partition u's unit disk D(u) into six sectors of equal angles 
from u, Si, ..., Sq. Note that all nodes within a sector Si have distances of at 
most 1 from each other, so they can directly communicate with each other (in 
D(u), distances can be up to 2). We will first explore properties of an arbitrary 
node in one sector, then consider the implications for a whole sector, and finally 
bound the cumulative sending probability in the entire unit disk. 

Recall the definition of a time frame, a subframe and / in the proof of The- 
orem [3] Fix a sector S in D(u) and consider some fixed time frame F. Let us 
refer to the sum of the probabilities of the neighboring nodes of a given node 
v G S by p v := J2wes\tv}Pw The following lemma shows that p v will decrease 
dramatically if p v is high throughout a certain time interval. 

Lemma 7. Consider a node v in a unit disk D(u). If p v > 5 — p during all 
rounds of a subframe I of F, then p v will be at most 1/n 2 at the end of I, w.h.p. 

Proof. We say that a round is useful for node v if from u's perspective there is an 
idle channel or a successful transmission at that round (when ignoring the action 
of u); otherwise the round is called non-useful. Note that in a non- useful round, 
according to our protocol, p v will either decrease (if the threshold T v is exceeded) 
or remain the same. On the other hand, in a useful round, p v will increase (if v 
senses an idle channel), decrease (if v senses a successful transmission) or reiuain 
the same (if v sends a message). Hence, p v can only increase during useful rounds 
of /. Let U be the set of useful rounds in / for our node v. We distinguish between 
two cases, depending on the cardinality \U\. In the following, let p„(0) denote 
the probability of v at the beginning of / (which is at most p). Suppose that 
/ > 2[(3clnn)/7] 2 for a sufficiently large constant c. (This lower bound coincides 
with our definition of / in the proof of Theorem [3l) 



Case 1: Suppose that \U\ < (clnn)/7, that is, many rounds are blocked and 
p v can increase only rarely. As there are at least (3clnn)/7 occasions in / in 
which c v > T v and \U\ < (clnn)/7, in at least (2clnn)/7 of these occasions v 
only saw blocked channels for T v consecutive rounds and therefore decides to 
increase T v and decrease p v . Hence, at the end of I, 

Pv < (l + 7) |MMcW7 ^(0) < (1 + 7) _clnn/7 P,(0) < e~ cln " = l/n c . 

Case 2: Next, suppose that \U\ > (chin)/ 7. We will show that many of these 
useful rounds will be successful such that p v decreases. Since p v < p < 1/24 
throughout I, it follows from the Chernoff bounds that w.h.p. v will sense the 
channel for at least a fraction of 2/3 of the useful rounds w.h.p. Let this set of 
useful rounds be called W . Consider any round t £14' . Let qo be the probability 
that there is an idle channel at round t and q\ be the probability that there 
is a successful transmission at t. It holds that qo + q\ = 1. From Lemma Q] we 
also know that q\ > qg ■ p v . Since p v > 5 — p for all rounds in I, it follows that 
<7i > 4/5 for every round in W . Thus, it follows from the Chernoff bounds that 
for at least 2/3 of the rounds in U 1 , v will sense a successful transmission w.h.p. 
Hence, at the end of / it holds w.h.p. that 

Pv < (l + 7)- (1/3) - |W V,(0) < (l+ 7 )-( 1 / 3 H 2c / 3 ) ln "/> u (0) < e ~(2c/9)lnn = 1/n 2c/9^ 

Combining the two cases with c > 9 results in the lemma. D 

Given this property of the individual probabilities, we can derive a bound 
for the cumulative probability of an entire sector S. In order to compute ps = 
TlivesP v i we introduce three thresholds, a low one, p gre en = 5, one in the middle, 
Pyeiiow = 5e, and a high one, p re d = 5e 2 . The following three lemmas provide 
some important insights about these probabilities. 

Lemma 8. For any subframe I in F and any initial value of ps in I there is at 
least one round in I with ps < Pgreen w.h.p. 

Proof. We prove the lemma by contradiction. Suppose that throughout the entire 
interval /, ps > p gr een ■ Then it holds for every node v G S that p v > p green — p 
throughout i\ In this case, however, we know from Lemma[7J that p v will decrease 
to at most 1/n 2 at the end of / w.h.p. Hence, all nodes v £ S would decrease 
p v to at most 1/n 2 at the end of / w.h.p., which results in pg < 1/n. This 
contradicts our assumption, so w.h.p. there must be a round t in / at which 

PS < Pgreen- □ 

Lemma 9. For any time interval I in F of size f and any sector S it holds 
that if ps < Pgreen at the beginning of I, then ps < Pyeiiow throughout I, w.m.p. 
Similarly, if ps < pyeiiow at the beginning of I , then ps < p re d throughout I , 
w.m.p. 
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Proof. It suffices to prove the lemma for the case that initially ps < p gr 
as the other case is analogous. Consider some fixed round t in /. Let ps be the 



cumulative probability at the beginning of t and p' s be the cumulative probability 
at the end of t. Moreover, let p s ' denote the cumulative probability of the nodes 
w G S with no transmitting node in D(w)\S in round t. Similarly, let p s denote 
the cumulative probability of the nodes w G S with a single transmitting node 
in D(w) \ S, and let p s ' be the cumulative probability of the nodes w G S that 
experience a blocked round either because they are jammed or at least two nodes 
in D(w) \ S are transmitting at t. Certainly, ps = p s + p s + p s . Our goal 
is to determine p' s in this case. Let qo(S) be the probability that all nodes in S 
stay silent, qi(S) be the probability that exactly one node in S is transmitting, 
and q2(S) = 1 — qo(S) — qi(S) be the probability that at least two nodes in S 
are transmitting. 

When ignoring the case that c v > T v for a node v € S at round t, it holds: 

Ws\ = lots) ■ [(i + i) P f + (i + ir 1 ^ + P f] 

+qi(S)-{(l+ 1 )- 1 pf+p < s 1) +pf } } 
+q2(S)-[ P T+p ( s 1) +pf] 



This is certainly also an upper bound for E[pg] if c v > T v for a node v G S 
because p v will never be increased (but possibly decreased) in this case. Now, 
consider the event E^ that at least two nodes in S transmit a message. If £2 
holds, then E[p' s ] = p' s = ps, so there is no change in the system. On the other 
hand, assume that E 2 does not hold. Let q' (S) = qo(S)/(l — q2(S)) and q[(S) = 
qi(S)/(l — 92 (S 1 )) be the probabilities qo(S) and qi(S) under the condition of 
-1^2- Then we distinguish between three cases. 
Case 1: p s — ps- Then 

Ws\ < %(S) ■ (1 + l)ps + q[(S) ■ (1 + 7) _1 PS 
= ((l+l)q' (S) + (l + 1 )- 1 q' 1 (S))ps. 

From LemmaUwe know that qo(S) < qi(S)/ps, so q' (S) < q[(S)/ps- If Ps > 
Pgreen, then q' Q (S) < q[{S)/5. Hence, 

Ws) < ((1 + 7)/6 + (1 + 7) _1 5/6)p s < (1 + l)- 1/2 Ps 
since 7 = o(l). On the other hand, p' s < (1 + j)ps in any case. 
Case 2: p s = ps- Then 

Ws}<<lo(S)-0- + 7)- l PS + qi(S)ps 

= (q'o(S)/(l + 7) + (1 - q'o(S)))ps = (1 - q'o(Sh/(l + j))p S - 

Now, it holds that 1 - 2:7/(1 + 7) < (1 + 7)~- T / 2 for all x G [0, 1] because from 
the Taylor series of e x and ln(l + x) it follows that 

(1 +l)- x/2 > 1 - (iln(l +7))/2 > 1 - (x(l - 7/2) 7 )/2 



and 

1 - 2:7/(1 + 7) < 1 - (x(l - 7/2)7)/2 

for all x, 7 £ [0, 1] as is easy to check. Therefore, when defining ip = q' (S), we 
get E\p' s ] < (1 + "f)~ v/2 Ps- On the other hand, p' s < p s < (1 + 7)^5. 

Case 5: p^ 2) = p s . Then for 99 = 0, E\p' s ] < p s = (1 + 7) _ip/2 Ps and p' s < p s = 
(l + ^ps- 

Combining the three cases and taking into account that p s +p s +Ps Ps> 
we obtain the following result. 

Lemma 10. There is a <fi £ [0,1] (depending on pi , p s and p^ ) so that 

Eb' s ]<(l+7)" P5 and p' s <(l + ^PS- (1) 

Proof. Let a = (1 + 7) 1 / 2 , 6 = (1 + 7) v/2 for the <p defined in Case 2, and 
c = 1. Furthermore, let xo = Pg /ps, X\ = Pg /ps an d X2 = Pg /ps- Define 

= - log 1+7 ((l/a)x + (l/o)xi + (l/c)x 2 ). Then we have 



Ws] < (1 + 7)^ 1/2 ^ 0) + (1 + lY^pf +Pf = (1 + 7) - * 



PS- 



We need to show that for this 0, also p' s < (1 + 7) 2< W As p^ < (1 + 7)p^ 0) + 
(1 + -y) v p s 1) +P5 } , this is true if 

a xq + b x\ + c X2 < 



((l/a)x + (l/6)x 1 + (l/c)x 2 ) 2 
or 

((l/o)» + (l/6)afi + (l/c)x 2 ) 2 (a 2 x + o 2 X! + c 2 x 2 ) < 1 (2) 

To prove this, we need two claims whose proofs are tedious but follow from 
standard math. 

Claim. For any a, 6, c > and any xo, xi, x 2 > with xq + X\ + x 2 = 1, 

(axo + 6x1 + cx 2 ) < (a xq + b x\ + c x 2 ) 

Claim. For any a, 6, c > and any xo, Xi, x 2 > with xo + Xi + x 2 = 1, 

((l/a)xo + (l/6)xi + (l/c)x 2 )(ax + bx\ + cx 2 ) < 1 

Combining the claims, Equation [2] follows, which completes the proof. □ 

Hence, for any outcome of E 2 , E[p' s ] < (l + j)~ v ps a.nd p' s < {l+^) 2,p ps for 
some <p £ [0, 1]. If we define qs = log 1+7 ps, then it holds that E[q' s ] < q$ — ip. 
For any time t in /, let qt be equal to qs at time t and ip t be defined as <p 
at time t. Our calculations above imply that as long as ps £ [p gr een, Pyeiiow]-, 
E[g t +i] < qt~Vt and q t+1 < q t + 2tp t . 



Now, suppose that within subframe I we reach a point t when ps > pyeiiow ■ 
Since we start with ps < p gr een, there must be a time interval I' C / so that 
right before I', p s < Pgreen, during I' we always have p gre en < Ps < Pyeiiow, 
and at the end of I' , ps > pyeiiow We want to bound the probability for this to 
happen. 

Consider some fixed interval I' with the properties above, i.e., with p$ < 
Pgreen right before I' and ps > Pgreen at the first round of /', so initially, 
Ps G [Pgreem (1 + l) Pgreen]- We use martingale theory to bound the probability 
that in this case, the properties defined above for /' hold. Consider the rounds 
in I' to be numbered from 1 to |/'|, let qt and ipt be defined as above, and let 
q' t = qt + J2i=i Pi- It holds that 

t t t t-i 

E Wt+i\ = E te+i + 5Z ^1 = E fe+i] + 22/Vi < it - <pt + X] v« = qt + llv* = it- 

i—l i— 1 i—1 i—1 

Moreover, it follows from Inequality ([1]) that for any round t, p' s < (1 + "f) 2ipt Ps- 
Therefore, qt+i < qt+2<p t , which implies that q^ , 1 < q' t +ip t . Hence, we can define 
a martingale (X t )t£i' with E[X t+ i] = X t and X t +i < X t + (fit that stochasti- 
cally dominates q' t . Recall that a random variable Y t stochastically dominates a 
random variable Z t if for any z, P[lt > z] > P[Z t > z\. In that case, it is also 
straightforward to show that ^ Yi stochastically dominates Yli^i, which we 
will need in the following. Let T = \I'\. We will make use of Azuma's inequality 
to bound Xt- 

Fact 4 (Azuma Inequality) Let Xq, X±, . . . be a martingale satisfying the 
property that Xi < Xi-i + Ci for all i > 1. Then for any 6 > 0, 

P[X T >X + 5]<e- s2 ^ 2 ^ c >\ 

Thus, for S = I/7 + J2i=i fi it holds in our case that 

P[X T > X + 8] < e-^/PS.Li ¥>?). 



This implies that 



[q' T >q' + 5]<e- s2 ^^^ 



for several reasons. First of all, stochastic dominance holds as long as ps G 
[Pgreen, Pyeiiow], and whenever this is violated, we can stop the process as the 
requirements on I' would be violated, so we would not have to count that prob- 
ability towards /'. Therefore, 

P[q T >q Q + I/7] < e-* 2 / (2 ££=i A 

Notice that qT > qo + I/7 is required so that ps > Pyeiiow at the end of I', so 
the probability bound above is exactly what we need. Let (p = 5Zi=i fi- Since 
ipi < 1 for all i, ip > J2i=i fi- Hence, 

S 2 > (1/7 + V ) 2 > ( 1 , <p 



2EL^~ 2 ^ ~^7 2 2 



This is minimized for l/(2tp^f 2 ) = ip/2 or equivalently, ip = 1/7. Thus, 



"[qr >qo + 1/7] < 



-1/7 



Since there are at most (2) ways of selecting I' C I, the probability that there 
exists an interval /' with the properties above is at most 



f\ e -ih<f* e -ih< 



K 2J ~ J -\og c n 

for any constant c if 7 = 0(l/(logT + log log n)) is small enough. D 

Lemma 11. For any sub frame I in F it holds that if there has been at least one 
round during the past subframe where ps < Pgreen , then throughout I , ps < pred 
w.m.p. 

Proof. Suppose that there has been at least one round during the past subframe 
where ps < pgreen- Then we know from Lemma [9] that w.m.p. ps < p ye iioiv at 
the beginning of /. But if ps < Pyeiiow at the beginning of /, we also know from 
Lemma [5] that w.m.p. ps < p re d throughout /, which proves the lemma. □ 

Now, define a subframe / to be good if ps < Pred throughout /, and otherwise 
/ is called bad. With the help of Lemma [8] and Lemma QT] we can prove the 
following lemma. 

Lemma 12. For any sector S, at most e/3/6 of the subframes I in F are bad 
w.h.p., where the constant /? > can be made arbitrarily small depending on the 
constant a in f . 

Proof. From Lemma [8] it follows that for every subframe I in F there is a time 
point t G I at which ps < Pgreen w.h.p. Consider now some fixed subframe I in 
F that is not the first one and suppose that the previous subframe in F had at 
least one round with ps < p green ■ Then it follows from Lemma QT] that for all 
rounds in /, ps < p re d w.m.p. (where the probability only depends on / and its 
preceding subframe), i.e., I is good. Hence, it follows from the Chernoff bounds 
that at most e/3/7 of the odd-numbered as well as the even-numbered subframes 
after the first subframe in F are bad w.h.p. (if the constant a is sufficiently 
large). This implies that overall at most e/3/6 of the subframes in F arc bad 
w.h.p. □ 

From Lemma [T"2l it follows that apart from an e/3-fraction of the subframes, 
all subframes I in F satisfy J2v£D(u)Pv G 0(1) throughout /, which completes 
the proof of Lemma |U 

3.3 Limitations of the Jade Protocol 

One may ask whether a stronger throughput result than Theorem Q] can be 
shown. Ideally, we would like to use the following model. A MAC protocol is 



called strongly c-competitive against some (T, 1 — e)-bounded adversary if, for any 
sufficiently large time interval and any node v, the number of rounds in which v 
successfully receives a message is at least a c-fraction of the total number of non- 
jammed rounds at v. In other words, a strongly c-competitive MAC protocol can 
achieve at least a c-fraction of the best possible throughput for every individual 
node. Unfortunately, such a protocol seems to be difficult to design. In fact, Jade 
is not strongly c-compctitive for any constant c > 0, even if the node density is 
sufficiently high. 

Theorem 5. In general, JADE is not strongly c-competitive for a constant c > 
if the adversary is allowed to be 2-uniform and e < 1/3. 

Proof. Suppose that (at some corner of the UDG) we have a set U of at least 1/p 
nodes located closely to each other that are all within the transmission range 
of a node v. Initially, we assume that J2 U £(jP u — ■'■' P v ~ P an< ^ T x = 1 for 
all nodes x € U U {v}. The time is partitioned into time intervals of size T. In 
each such time interval, called T -interval, the (T, I — e)-bounded adversary jams 
all but the first eT rounds at U and all but the last eT rounds at v. It follows 
directly from Section 2.3 of [5] that if T = J?((log 3 n)/(7 2 e)), then for every node 
u S U, T u < a^/Tlogn/e w.h.p. for some sufficiently large constant a. Thus, 
T u < "fT/(f3logn) w.h.p. for any constant /? > if T is sufficiently large. Hence, 
between the last non-jammed round at U and the first non-jammed round at v 
in a T-interval, the values T u are increased (and the values p u are decreased) at 
least /3(logn)/(67) times. Thus, at the first non-jammed round at v, it holds for 
every u £[/ that 

Pu <P ■ (1 + 7)-^°S")/( 6 T) < p . e -(/V6)log« < 1/n P/6 

and, therefore, J2ueuP u = 0(l/n 2 ) if /3 > 18. This cumulative probability will 
stay that low during all of v's non-jammed rounds as during these rounds the 
nodes in U are jammed. Hence, the probability that v receives any message 
during its non-jammed rounds of a T-interval is 0(l/n 2 ), so Jade is not c- 
competitive for v for any constant c > 0. □ 

Also, in our original model, Jade is not constant competitive if the node 
density is too low. 

Theorem 6. In general, Jade is not c-competitive for a constant c independent 
of e if there are nodes u with \D(u)\ = o(l/e) and the adversary is allowed to be 
2-uniform. 

Proof. Suppose that we have a set U of k = o(l/e) nodes located closely to 
each other that are all within the transmission range of a node v. Let T = 
/2((log n)/(-/ 2 e)). In each T-interval, the adversary never jams v but jams all 
but the first eT rounds at U. Then Section 2.3 of [5] implies that for every node 
u E U,T U < jT/(/3\ogn) w.h.p. for any constant ft > if T is sufficiently large. 
The nodes in U continuously increase their T u -values and thereby reduce their p u 
values during their jammed time steps. Hence, the nodes in U U {v} will receive 
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Fig. 1. Top: Throughput as a function of network size. Bottom left: Convergence 
behavior for multi-hop networks (uniform distribution). For the plot, we used 
11 = 500. Note that the start-up phase where the sending probabilities are high is 
short (no more than 50 rounds). Bottom right: Convergence of T v for multi-hop 
networks (uniform distribution). For the plot, we used n = 500. 



at most eT- \U\ + (eT + 0(T/ log n)) = eT • o(l/e) + (e + o(l))T = (e + o(l))T 
messages in each T-interval on expectation whereas the sum of non-jammed 
rounds over all nodes is more than T. □ 

This implies Theorem [2j Hence, Theorem [1] is essentially the best one can 
show for Jade (within our notation). 



3.4 Simulations 

In order to complement our theoretical insights, we conducted some experiments. 
First, we present our throughput results for a sufficiently large time interval, and 
then we discuss the convergence behavior. For our simulations, as in our formal 
analysis, we assume that initially all nodes v E V have a high sending probability 
of p v = p = 1/24. The nodes are distributed at random over a square plane of 
4x4 units, and are connected in a unit disk graph manner (multi-hop). We 
simulate the jamming activity in the following way: for each round, a node is 
jammed independently with probability (1 — e). We run the simulation for a 
sufficiently large number of time steps indicated by the Theorem [TJ i.e., for 
([T + (log 3 n)/( 7 2 e)] • (logn)/e rounds, where e = 0.3, T = 200, and 7 = 0.1. 

Figure [T] (top) shows the throughput competitiveness of Jade for a sce- 
nario where different numbers of nodes are distributed uniformly at random 



over the plane and a scenario where the nodes are distributed according to a 
normal/Gaussian distribution A/"(0, 1). In both cases, the throughput is larger 
when the density is higher. This corresponds to our formal insight that a con- 
stant competitive throughput is possible only if the node density exceeds a cer- 
tain threshold. For example, this holds in case there are 60 nodes in the 4x4 
plane (density of 3.75), as there are at least 3.75ir m 12 > 2/e ~ 7 uniformly 
distributed nodes in one unit disk. As can be seen in the figure, when the number 
of nodes is larger than 60, the throughput falls in a range between 20% and 35%. 

Convergence time is the second most important evaluation criterion. We 
found that already after a short time, a constant throughput is achieved; in 
particular, the total sending probability per unit disk approaches a constant 
value quickly. This is due to the nodes' ability to adapt their sending probabili- 
ties fast, see Figurc[T]( bottom left). The figure also illustrates the high correlation 
between success ratio and aggregated sending probability. 

Finally, we have also studied the average of the T v values over time. While 
initially, due to the high sending probabilities, the T v intervals are large (up to 
around 5 if n — 500), they decline quickly, similarly to our observations made 
in the previous plots. The average of T v values stabilize in an interval [2,4], as 
shown in Figure [T] {bottom right). 



4 Conclusion 

This paper has presented the first jamming-resistant MAC protocol with prov- 
ably good performance in multi-hop networks exposed to an adaptive adversary. 
While we have focused on unit disk graphs, we believe that our stochastic anal- 
ysis is also useful for more realistic wireless network models. Moreover, although 
our analysis is involved, our protocol is rather simple. 
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